C# Redirect IP and Search Memory Adresses?

[vitalka]

1

[chea77er]

It's possible, you can hook winsock with .NET as well, but that's bad. But you can easily change the IP in the Media.pk2 then start the client on the normal way.

To find memory addresses you can use OllyDbg or some easier tools like T-Search or CheatEngine.

To work with these memory addresses you can use the kernel32.dll:

[vitalka]

I want to search the memory adresses after each update WITH my C# code and not with manually with OllyDBG.

I want a program in C# who works like the edxLoader. Not only with WriteProcessMemory

[vitalka]

push

[Schickl]

Originally Posted by vitalka

push

bump*

[bootdisk]

chea77er is right.
This thing of 'patterns'/'signatures' is commonly used to apply patches, to make your tool non-dependant of a certain version of the executable for instance.
It just searches for some code bytes that might be likely be always in the same sequence and returns the address.
From there you can do whatever you want.

If you have never tried this before, try to find the signature/pattern of 'Please, execute the Silkroad.exe' message and apply a patch to bypass it.

Once you've achieved that you will understand better the whole thing... as everything in life, it looks complicated but it's not.

don't give up!

[Oriya9]

Originally Posted by bootdisk

If you have never tried this before, try to find the signature/pattern of 'Please, execute the Silkroad.exe' message and apply a patch to bypass it.

To bypass the launcher you don't need any memory editing, .NET has Mutex in the System.Threading namespace.

C#:

using System.Threading;
using System.Diagnostics;

string Path = "C:\\Program Files (x86)\\Mail.ru\\SilkRoad Online\\sro_client.exe";
Mutex Mutex1 = new Mutex(false, "Silkroad Online Launcher");
Mutex1.WaitOne();
Mutex Mutex2 = new Mutex(false, "Ready");
Mutex2.WaitOne();
Process p = new Process();
p.StartInfo.FileName = Path;
p.StartInfo.Arguments = " 0 /38 0 0";
p.Start();
while (p.MainWindowHandle == IntPtr.Zero)
{
    Application.DoEvents();
    Thread.Sleep(1);
}
Mutex1 = null;
Mutex2 = null;

VB.NET:

Imports System.Threading

Dim Path As String = "C:\Program Files (x86)\Mail.ru\SilkRoad Online\sro_client.exe"
Dim Mutex1 As New Mutex(False, "Silkroad Online Launcher")
Mutex1.WaitOne()
Dim Mutex2 As New Mutex(False, "Ready")
Mutex2.WaitOne()
Dim p As New Process
p.StartInfo.FileName = Path
p.StartInfo.Arguments = " 0 /38 0 0"
p.Start()
While p.MainWindowHandle = 0
    Application.DoEvents()
    Thread.Sleep(1)
End While
Mutex1 = Nothing
Mutex2 = Nothing

This is just a simple example of course.

[bootdisk]

Originally Posted by Oriya9

To bypass the launcher you don't need any memory editing, .NET has Mutex in the System.Threading namespace.

Mutexes are part of the win32 api, sure .Net will have that.
I prefer the patches, at some point you will need to do them, perhaps for C inlining or asm.
And he was asking about FindPattern or FindSignatures, not a launcher...
The suppress of the 'Please...' message is a good way of learning how to.

[lesderid]

Originally Posted by Oriya9

To bypass the launcher you don't need any memory editing, .NET has Mutex in the System.Threading namespace.

*Examples*

He was just trying to make a point, how signatures work.

But thanks, didn't know .Net had Mutex. ^^

[benco]

Don't do :
Mutex1 = null;
Mutex2 = null;

use :
Mutex1.Close()
Mutex1.Dispose()
Mutex2.Close()
Mutex2.Dispose()

[Oriya9]

Originally Posted by benco

Don't do :
Mutex1 = null;
Mutex2 = null;

use :
Mutex1.Close()
Mutex1.Dispose()
Mutex2.Close()
Mutex2.Dispose()

Mutex is not a resource, it's an API, you can't close or dispose it.
setting the variable to null will release the API command line, you don't even have to do this if the sub ends somewhere (if there's no loop or something).

[benco]

Mutex is a class in .NET not an API function... if his application is open every time he should dispose the instance of this classe for multiple launching.
read msdn Mutext :

[Haxor]

one another question

My loader from oriya9 code work , but the problem is sro_client is hidden
I mean espically in esro
in isro i can see sro_Client but in this i cant
You know how to show it , so i can do hide and show features to the loader

[Oriya9]

Originally Posted by benco

Mutex is a class in .NET not an API function... if his application is open every time he should dispose the instance of this classe for multiple launching.
read msdn Mutext :

You are right, sorry, I must have been confused with something else.

@UP
Must be a GG related issue with your system, it is working for me.

[vitalka]

ive found a really simple code snippet for findpattern, but i dont know why it doesnt work in Visual C# 2008:

Can someone test it?